Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Cross-Site Scripting in dojo
Template Injection in jsrender
Forgeable Public/Private Tokens in jws
Remote Memory Disclosure in bittorrent-dht
SQL Injection in mysql
Unsafe Merging of CORS Configuration Conflict in hapi
Command Injection in gm
Regular Expression Denial of Service in ansi2html
Regular Expression Denial of Service in bleach
Denial of Service in yar
Django Incorrect Default Permissions
Django Incorrect Default Permissions
File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution
Regular Expression Denial of Service in validator
Command Injection in ungit
API Admin Auth Weakness in tomato
Directory Traversal in st
Open Redirect in serve-static
Content Injection in remarkable
Validation Bypass in paypal-ipn
Directory Traversal in nhouston
Multiple Content Injection Vulnerabilities in marked
Heap Based Buffer Overflow in libyaml
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.